1845 matches found
NuGet Package 'AdaptiveExpressions' Detection
The remote host has a 'AdaptiveExpressions' with an Unverified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
NuGet Package 'Microsoft.Bot.Configuration' Detection
The remote host has a 'Microsoft.Bot.Configuration' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...
NuGet Package 'Microsoft.ML.TensorFlow.Redist' Detection
The remote host has a 'Microsoft.ML.TensorFlow.Redist' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
NuGet Package 'Microsoft.Bot.Schema' Detection
The remote host has a 'Microsoft.Bot.Schema' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
NuGet Package 'Microsoft.Recognizers.Text.Sequence' Detection
The remote host has a 'Microsoft.Recognizers.Text.Sequence' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
NuGet Package 'Microsoft.ML.Recommender' Detection
The remote host has a 'Microsoft.ML.Recommender' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...
NuGet Package 'Microsoft.Extensions.ML' Detection
The remote host has a 'Microsoft.Extensions.ML' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
CVE-2024-47604
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
CVE-2024-47604 XSS vulnerability in NuGetGallery HTML attributes handling
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
CVE-2024-47604
CVE-2024-47604 describes an XSS vulnerability in NuGetGallery’s handling of HTML element attributes. The issue could allow an attacker to execute arbitrary HTML or JavaScript in a victim’s browser. Affected product is NuGet Gallery (NuGet.org backend/frontend). The underlying root cause is improp...
NuGet Gallery 跨站脚本漏洞
NuGet Gallery is a NuGet open source package repository that supports NuGet. A cross-site scripting vulnerability exists in NuGet Gallery. An attacker could exploit this vulnerability to execute arbitrary HTML or Javascript code in the victim's browser...
PT-2024-32668 · Microsoft · Nuget Gallery
Name of the Vulnerable Software and Affected Versions: NuGet Gallery affected versions not specified Description: The NuGet Gallery has a security issue in its handling of HTML element attributes. This allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
gitea -- multiple issues
Problem Description: Replace v-html with v-text in search inputbox Fix nuget/conan/container packages upload bugs...
CVE-2024-40636
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
CVE-2024-40636 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
NuGet Packages Exploited to Target Developers with Malware
NuGet packages are under attack! A new malware campaign exploits hidden code execution techniques to inject malware into…...
60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also adding a new layer of stealth to evade detection. The fresh packages, about 60 in number and spanning 290 versions,...
CVE-2024-38081
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
